d94ec06.exe

info
MZ
PE
resources
imports
foremost
hexdump
disasm
log
discuss
donate

filename	d94ec06.exe
size	720896 (0xb0000)
md5	d88a1b8fa23e3bbcb865f5d2e255d6d9

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
93	4035	4
14	7299	1
10	8047	11
4	8047	2
11	9782	3
4	9782	3
1	0	132
11	8000	3
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x53934c58
PointerToSymbolTable	0x1000000
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0xf
Magic	0x10b
LinkerVersion	1.255
SizeOfCode	0x2000
SizeOfInitializedData	0xe9000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2526
BaseOfCode	0x1000
BaseOfData	0x3000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.17
Reserved1	0
SizeOfImage	0xec000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1001
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v5.0/v6.0 (MFC)

Sections

name	va	vsize	raw size	flags
.�ext	0x1000	0x16ff	0x20a0	R-X CODE
.rdata	0x3000	0	0x1000	R-- IDATA
.dat5	0x4000	1	0x1000	-W- IDATA SHARED
.rsr	0x5000	0xe6c98	0xe7000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0x25000000
IMPORT	0x3660	1
RESOURCE	0x5000	0xe6c98
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	7
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x3000	0x100
Delay_IAT	0	0
CLR_Header	0	0
	0	7

show previews

type	name	size	cp	r
DIALOG	#100	2369050540	2239073235	3664474628
DIALOG	#100 / #624338700 / #1555243922	624535483	173356733	3175063476
DIALOG	#100 / #624338700 / #1555243922	3261641742	1284192741	1330343432
DIALOG	#100 / #624338700 / #1555243922	165246939	147179870	4286389267
DIALOG	#100 / #624338700 / #1555243922	3872040803	2513040100	1314083861
DIALOG	#100 / #624338700 / #1555243922	2926933527	845033945	4164004357
DIALOG	#100 / #624338700 / #1555243922	935028765	2081798204	2753737597
DIALOG	#100 / #624338700 / #1555243922 / #4064357226	1569746698	2574421247	1281676272
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096	1730698263	383928740	1020388410
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	1013318571	577026853	2111179744
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	1980010052	2912797338	572385807
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #371384973	3403812382	1335054459	1828583245
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	63016978	811080769	2398907712
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594	2460624376	4064599688	3342098951
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #1737066431	3398929865	1020874967	1731370881
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #1737066431	1971986567	3783890955	909009131
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #1737066431	2329278585	3506287248	1545974939
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #1737066431	1442347292	355158929	244507881
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #1737066431	1694383821	2138936826	982623180
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231	1535318175	3357956055	239994295
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231	2664613034	864047635	2830455391
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #2880031536	1999965150	1426962308	628632201
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #2880031536	4118806545	2256535570	3498049555
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #2880031536	2853065975	3066097216	2967874262
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #2536958231 / #2880031536	229105104	3563994501	4055274967
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594	45517704	182439267	1455832198
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857	4179156162	1241312341	671836307
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857	1712995761	1968068394	3384196746
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857 / #437040887	3143468266	3903871126	1479968275
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857 / #3781016748	2682747570	3855461468	591748637
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857 / #3781016748	2426919248	2404827250	1862401097
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857 / #3781016748	874196947	3093195222	3806624622
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857 / #3781016748	0	0	0
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857 / #3781016748	3571657741	813062696	3903807581
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857 / #3781016748	2885087087	42083806	271033041
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857	1558578561	2739404242	4083456663
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857	2054620749	2498210578	813558545
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #1738990857	3050660551	4206634564	2427847700
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #100315037	3160987375	1617907887	917582662
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #100315037	1927728356	2466725280	3048378468
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #100315037	2564675511	579460633	3867173225
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #100315037	3530339599	2691296520	3681324472
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #100315037 / #1450123113	2738940274	576023941	26897463
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #100315037 / #1450123113	2384166067	2339801070	94430648
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1794588594 / #100315037 / #1450123113	1072651825	918470397	3978935692
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	1708810226	1545349366	2419701871
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	2669857771	2735503693	108166631
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	139782435	673215009	356691548
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	1080938631	3894490039	4173646091
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	2319282795	1504394571	1496492912
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	3201379444	192268871	2995693124
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	719558534	64913268	3621920013
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	453652638	3051381683	3781002767
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952	650575548	1830586442	3865808093
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391	414485787	2699626988	4243481776
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391 / #3407514105 / #2799744950	0	0	0
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391 / #3407514105 / #2799744950	563920057	3491229097	2437460748
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391 / #3407514105	3588955953	2783541491	1064088689
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391	2679862757	3974318633	2369690926
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391	2447168195	1473055151	1139641147
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391	392298664	1484215925	297117819
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391	3463165358	3439601660	3393900047
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391 / #2914494190	183332539	1061096201	942044034
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391 / #2914494190 / #1371621462 / #3093956885 / #4176438472	349585868	1338074325	2010262539
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444 / #1356264952 / #1554317391 / #2914494190 / #1371621462 / #3093956885 / #4176438472	2772159288	2444783728	1727726304
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444	2322409068	1200662522	2685442084
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444	2157065200	3510035297	2169904977
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444	4238736371	3080619961	4184940747
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444	2239014214	311534449	163339726
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #2422547444	2589051802	4250259380	1276590109
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096	2398633829	3396856033	711058565
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096	2855128398	937813448	2091497304
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096	2620924373	2177330816	3833258148
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096	1616324167	2808932596	1462386981
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096	418273938	1198670056	1690527871
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096	3258586308	704000479	3000289938
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096	4093224134	3753844957	1311778753
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #3150258953	3375397018	217321468	1352783301
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #3150258953	0	0	0
DIALOG	#100 / #624338700 / #1555243922 / #4064357226 / #154617096 / #3150258953	3005045533	1375394517	1050086977
DIALOG	#100 / #624338700 / #1555243922	1396947162	3946962695	3817405701
DIALOG	#100 / #624338700 / #1555243922	1382825199	2711849174	2624879301
DIALOG	#100 / #624338700 / #1555243922	1820252879	3796605478	564045699
DIALOG	#100 / #624338700 / #1555243922	2760784985	4034745515	4177168112
DIALOG	#100 / #624338700 / #1555243922	3656668555	1300992260	1303318516
DIALOG	#100 / #624338700	379348840	3473409423	3254988770
DIALOG	#100 / #624338700	1926032147	2914227316	297366650
DIALOG	#100 / #624338700	2078466579	1334705640	1206332373
DIALOG	#100 / #624338700	3827954527	352108017	1931895113
DIALOG	#100 / #624338700	502349710	1708647124	3524156414
DIALOG	#100 / #624338700	2462392563	3527438412	3580841182
DIALOG	#100 / #624338700 / #3035153337	3684267217	3338331224	80098178
DIALOG	#100 / #624338700 / #3035153337 / #3756547283	3473828700	1708844865	2218413148
DIALOG	#100 / #624338700 / #3035153337 / #3756547283	2984372045	4058815651	3194485608
DIALOG	#100 / #624338700	56047079	2661971776	2622859457
DIALOG	#100 / #624338700	2795972807	1432411081	1413933576
DIALOG	#100 / #624338700	3676452145	1041198187	2952175497
DIALOG	#100 / #624338700	0	0	0
DIALOG	#100 / #624338700	1527735724	247276805	1773782612
DIALOG	#100 / #624338700	3596881263	739835770	2133706478
DIALOG	#102	712	1252	0

module_name	hint	ord	function_name
MFC42.DLL		5731
MFC42.DLL		3922
MFC42.DLL		1089
MFC42.DLL		5199
MFC42.DLL		2396
MFC42.DLL		3346
MFC42.DLL		5300
MFC42.DLL		5302
MFC42.DLL		2725
MFC42.DLL		4079
MFC42.DLL		4698
MFC42.DLL		5307
MFC42.DLL		5289
MFC42.DLL		5632
MFC42.DLL		2982
MFC42.DLL		3147
MFC42.DLL		3259
MFC42.DLL		4465
MFC42.DLL		3136
MFC42.DLL		3262
MFC42.DLL		2985
MFC42.DLL		3081
MFC42.DLL		2976
MFC42.DLL		3830
MFC42.DLL		3831
MFC42.DLL		3825
MFC42.DLL		3079
MFC42.DLL		4080
MFC42.DLL		4622
MFC42.DLL		4424
MFC42.DLL		3738
MFC42.DLL		561
MFC42.DLL		815
MFC42.DLL		2514
MFC42.DLL		2621
MFC42.DLL		1134
MFC42.DLL		641
MFC42.DLL		825
MFC42.DLL		823
MFC42.DLL		5265
MFC42.DLL		4376
MFC42.DLL		4853
MFC42.DLL		4998
MFC42.DLL		2512
MFC42.DLL		6052
MFC42.DLL		4078
MFC42.DLL		1775
MFC42.DLL		4407
MFC42.DLL		5241
MFC42.DLL		2385
MFC42.DLL		5163
MFC42.DLL		6374
MFC42.DLL		4353
MFC42.DLL		5280
MFC42.DLL		3798
MFC42.DLL		4837
MFC42.DLL		4441
MFC42.DLL		2648
MFC42.DLL		2055
MFC42.DLL		6376
MFC42.DLL		3749
MFC42.DLL		5065
MFC42.DLL		1727
MFC42.DLL		5261
MFC42.DLL		2446
MFC42.DLL		2124
MFC42.DLL		5277
MFC42.DLL		4627
MFC42.DLL		4425
MFC42.DLL		3597
MFC42.DLL		324
MFC42.DLL		4234
MFC42.DLL		2362
MFC42.DLL		800
MFC42.DLL		4160
MFC42.DLL		540
MFC42.DLL		755
MFC42.DLL		470
MFC42.DLL		4133
MFC42.DLL		4297
MFC42.DLL		613
MFC42.DLL		289
MFC42.DLL		6334
MFC42.DLL		1168
MFC42.DLL		2863
MFC42.DLL		2379
MFC42.DLL		1146
MFC42.DLL		2554
MFC42.DLL		4486
MFC42.DLL		6375
MFC42.DLL		4274
MFC42.DLL		4710
MFC42.DLL		4673
MFC42.DLL		1576
MFC42.DLL		5714
MSVCRT.dll	241		_ftol
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	390		_onexit
MSVCRT.dll	211		_exit
MSVCRT.dll	72		_XcptFilter
MSVCRT.dll	585		exit
MSVCRT.dll	143		_acmdln
MSVCRT.dll	88		__getmainargs
MSVCRT.dll	271		_initterm
MSVCRT.dll	131		__setusermatherr
MSVCRT.dll	157		_adjust_fdiv
MSVCRT.dll	106		__p__commode
MSVCRT.dll	111		__p__fmode
MSVCRT.dll	129		__set_app_type
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	183		_controlfp
MSVCRT.dll	610		fseek
MSVCRT.dll	612		ftell
MSVCRT.dll	682		rewind
MSVCRT.dll	605		fread
MSVCRT.dll	588		fclose
MSVCRT.dll	73		__CxxFrameHandler
MSVCRT.dll	426		_setmbcp
MSVCRT.dll	515		_wfopen
KERNEL32.dll	382		GetModuleFileNameW
KERNEL32.dll	381		GetModuleFileNameA
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	439		GetStartupInfoA
KERNEL32.dll	83		CreateFileA
USER32.dll	8		AppendMenuA
USER32.dll	571		SendMessageA
USER32.dll	348		GetSystemMenu
USER32.dll	422		IsIconic
USER32.dll	255		GetClientRect
USER32.dll	196		EnableWindow
USER32.dll	446		LoadIconA
USER32.dll	349		GetSystemMetrics
USER32.dll	182		DrawIcon

show previews

offset	size	type	comment
0	720896	EXE	06/07/2014 17:31:04	#
15c1	15	HTM		#
5578	27728	JPG		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xFC\xDB" followed by "`\x88" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 71315 entries in directory, but got EOF on 62714-th.

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "+\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "{\xDB" followed by "\xD0L" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "E\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xED\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x06\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "|\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 33539 entries in directory, but got EOF on 18632-th.

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA8\xD9" followed by "\xC6\xEC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xAB\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\n\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "j\xDA" followed by "`q" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "[\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x12\xDA" followed by "\xEC\b" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xF1\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x96\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: ")\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 60049 entries in directory, but got EOF on 48900-th.

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 74861 entries in directory, but got EOF on 56354-th.

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA7\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 33213 entries in directory, but got EOF on 6385-th.

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x84\xD9" followed by "\x00\x00" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xBA\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 53329 entries in directory, but got EOF on 19645-th.

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x84\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xE3\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "M\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xE8\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xB6\xDB" followed by "\xFE\x83" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC8\xDB" followed by "\x02'" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 648444

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x9E\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "`\xDA" followed by "\xB2:" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC6\xDB" followed by "eO" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "n\xD8" followed by "\x04\xF4" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "B\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x9B\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "`\xD9" followed by "\x92W" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x06\xDB" followed by "\a " on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 379659

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 469023

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\n\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA3\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x9D\xDB" followed by "\x11\xE9" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "d\xDA" followed by "%\x92" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x1F\xDA" followed by "\x16&" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 493998

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: ".\xD8" followed by "\xB4d" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 65328 entries in directory, but got EOF on 34613-th.

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "C\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x8A\xDA" followed by "\xC6\x95" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA9\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xD7\xDB" followed by "\x84\xE4" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 521195

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "S\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "w\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA5\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x04\xD8" followed by "o\x11" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "U\xD8" followed by "\x91\xDB" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xD6\xD8" followed by ",\xAD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "4\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xFB\xD8" followed by "F\x8B" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "r\xDA" followed by "\x86T" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "4\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x94\xD9" followed by "\n<" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: ";\xDB" followed by "\x8D\xAB" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "Z\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "P\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "|\xDA" followed by "Y\xC7" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "7\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "z\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA6\xD9" followed by "\xE6N" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 459926

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 432298

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: 93015 entries in directory, but got EOF on 2926-th.

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 514375

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xF7\xD8" followed by "H\xC3" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 136271

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 138681

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xBA\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 458669

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA1\xD9" followed by "\xE2\x81" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 229266

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "L\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 164569

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xD7\xDA" followed by "\x80\x9B" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: " \xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC1\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "<\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "X\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 50337

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xB6\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 47101

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 167506

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xA0\xDA" followed by "\x8E\xD9" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 214163

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xCA\xD8" followed by "\xDD\xD1" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "M\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xE5\xD8" followed by ":=" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\r\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x0F\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 575071

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "8\xDA" followed by "\xC4s" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 228248

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "L\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 496608

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 1080

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x00\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 327750

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "3\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "h\xDB" followed by "\x05s" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 566919

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xB6\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x11\xDB" followed by "A&" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "Y\xDB" followed by "\x02g" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 131217

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\"\xD9" followed by "j5" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 346456

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x97\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 156352

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "<\xDA" followed by "/\e" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 299619

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "Y\xD8" followed by "\x04\xCB" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 586602

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "C\xDF" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "%\xD9" followed by "/5" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 246337

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xB9\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 703539

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x89\xD9" followed by "\xEB\xF2" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "c\xDA" followed by "V\xA5" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 132289

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xF6\xD8" followed by "H\x03" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xC6\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 252676

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 150505

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "E\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 84037

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 90744

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x06\xDE" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 535289

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "%\xDC" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 720896

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 470206

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 706801

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 642887

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 909

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\x81\xDD" on UTF-16LE

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xFC\xDD" on UTF-16LE

[?] too many errors getting resource names, stopped on 49369 of 62967

[!] PEdump::IMAGE_RESOURCE_DIRECTORY: loop3 detected at file pos 472407

[!] PEdump::IMAGE_RESOURCE_DIRECTORY failed to read entry name: "\xF5\xDE" on UTF-16LE

[?] too many errors getting resource names, stopped on 13664 of 63165

[?] can't find file_offset of VA 0x59591f14

[?] can't find file_offset of VA 0x1df44074

[?] can't find file_offset of VA 0xb4c23bc6

[?] can't find file_offset of VA 0x171602aa

[?] can't find file_offset of VA 0x6f55d913

[?] can't find file_offset of VA 0x7c4210be

[?] can't find file_offset of VA 0x6adf631d

[?] can't find file_offset of VA 0x597efea1

[?] can't find file_offset of VA 0x4e477c28

[?] can't find file_offset of VA 0xbb3395e1

[?] can't find file_offset of VA 0x28a58aba

[?] can't find file_offset of VA 0xeaf75e1c

[?] can't find file_offset of VA 0xdba2c27f

[?] can't find file_offset of VA 0x96d9af72

[?] can't find file_offset of VA 0x734179c7

[?] can't find file_offset of VA 0x9c17f978

[?] can't find file_offset of VA 0x7babb2a6

[?] can't find file_offset of VA 0x58cdaba2

[?] can't find file_offset of VA 0x528494d9

[?] can't find file_offset of VA 0xd8e3f2f4

[?] can't find file_offset of VA 0xf0b8bcc4

[?] can't find file_offset of VA 0xc3f311a3

[?] can't find file_offset of VA 0x18800014

[?] can't find file_offset of VA 0xd08e3a0b

[?] can't find file_offset of VA 0xd2cd074

[?] can't find file_offset of VA 0x9a1fc1c2

[?] can't find file_offset of VA 0xdc88e002

[?] can't find file_offset of VA 0x8abf5adc

[?] can't find file_offset of VA 0x7fbe4dc3

[?] can't find file_offset of VA 0xc33de302

[?] can't find file_offset of VA 0xb2d44730

[?] can't find file_offset of VA 0xdbd49062

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0xb7841ac6

[?] can't find file_offset of VA 0x99a82b6b

[?] can't find file_offset of VA 0xab5f7314

[?] can't find file_offset of VA 0xf3091e2

[?] can't find file_offset of VA 0xc7eda331

[?] can't find file_offset of VA 0x7277c62f

[?] can't find file_offset of VA 0xf51f313b

[?] can't find file_offset of VA 0xe87b8ab6

[?] can't find file_offset of VA 0x220b7159

[?] can't find file_offset of VA 0x46e09b5

[?] can't find file_offset of VA 0x2785e859

[?] can't find file_offset of VA 0x79e392c

[?] can't find file_offset of VA 0xd40365e8

[?] can't find file_offset of VA 0x21042afc

[?] can't find file_offset of VA 0xdd73426

[?] can't find file_offset of VA 0xe9cb40e9

[?] can't find file_offset of VA 0xb887f801

[?] can't find file_offset of VA 0x3d739202

[?] can't find file_offset of VA 0x2ff7628e

[?] can't find file_offset of VA 0x83a3dae3

[?] can't find file_offset of VA 0x94d537cf

[?] can't find file_offset of VA 0x9e5e33a2

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0xf256dc77

[?] can't find file_offset of VA 0xaeb8e3d3

[?] can't find file_offset of VA 0x384250cd

[?] can't find file_offset of VA 0x3f5027fe

[?] can't find file_offset of VA 0xcc04a0e6

[?] can't find file_offset of VA 0xb2bd4b84

[?] can't find file_offset of VA 0xf1dea7de

[?] can't find file_offset of VA 0x27041bd0

[?] can't find file_offset of VA 0x671ed48

[?] can't find file_offset of VA 0xc912d3fa

[?] can't find file_offset of VA 0xa0410784

[?] can't find file_offset of VA 0x96a50ea0

[?] can't find file_offset of VA 0xfadcd2f5

[?] can't find file_offset of VA 0xcc9a8ea9

[?] can't find file_offset of VA 0x4d8abb40

[?] can't find file_offset of VA 0x5cf0269e

[?] can't find file_offset of VA 0xd8f689d0

[?] can't find file_offset of VA 0xef15218d

[?] can't find file_offset of VA 0xcf650247

[?] can't find file_offset of VA 0x97e765df

[?] can't find file_offset of VA 0x1ab90bad

[?] can't find file_offset of VA 0xc1dfe83a

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0x2ac8b42b

[?] can't find file_offset of VA 0xa96ae291

[?] can't find file_offset of VA 0x171ee57a

[?] can't find file_offset of VA 0xaeb91c81

[?] can't find file_offset of VA 0x6c8ed8ec

[?] can't find file_offset of VA 0x8a0c8d08

[?] can't find file_offset of VA 0x64bb849f

[?] can't find file_offset of VA 0x24e88fa4

[?] can't find file_offset of VA 0xfbb8867d

[?] can't find file_offset of VA 0x325953b7

[?] can't find file_offset of VA 0x268c1ed

[?] can't find file_offset of VA 0x6733a68d

[?] can't find file_offset of VA 0xb912af39

[?] can't find file_offset of VA 0xdaf7ac34

[?] can't find file_offset of VA 0xb7db71b9

[?] can't find file_offset of VA 0xcee1b0a7

[?] can't find file_offset of VA 0x100cbd36

[?] can't find file_offset of VA 0x53f481c8

[?] can't find file_offset of VA 0x0

[?] can't find file_offset of VA 0xb5e6dbe6

[?] can't find file_offset of VA 0x6168c43f

[?] can't find file_offset of VA 0xb8e489e2

[?] too many errors getting resource data, stopped on 39712 of 49369

[?] too many errors getting resource data, stopped on 11231 of 13664

[?] can't find file_offset of VA 0x903858

[?] can't find file_offset of VA 0x0